Fumiko Privacy Policy (Android)
Version 1.0 November 8, 2026
Translation. This is an English translation of the Polish version, which is the binding text. If the two differ, the Polish version prevails.
1. In short
- Fumiko has no accounts, ads or analytics tools and does not send me crash reports.
- By default, translation happens on the phone. Text, images and screenshots do not leave the phone, and I have no access to them.
- The exception is “Własne API” (“Own API”), which you turn on yourself: the text to be translated then goes to the provider you choose. Images and screenshots never leave the phone.
- The phone downloads the list of models from the Fumiko server, and model files and text recognition packs from Hugging Face. These servers see the phone's IP address.
2. Controller and contact
The controller of the data described in this policy is Marek Maks, a natural person. I provide the app as part of an unregistered business activity (Article 5(1) of the Polish Entrepreneurs' Law).
- Email: support@approject.dev
- Place of residence and address: Traugutta 15, 36-200 Brzozów, Poland
- Phone: +48 513 785 574
3. What stays on the phone
- Tekst (Text): the text, the glossary and the translation are in the app's memory. During translation they are also in a working file, which is excluded from backups. The file disappears when the translation finishes, hits an error or is stopped. If Android closes the app during the work, the file stays until you open Fumiko again and finish or stop the translation.
- Manga: the page and the result are in memory. “Zapisz w galerii” (“Save to gallery”) creates a file in the Pictures/Fumiko folder. You delete it in the gallery.
- Clipboard: “Kopiuj” (“Copy”) puts the translation on the phone's clipboard.
- Ekran (Screen): screen translation requires your permission to display over other apps and to record the screen. Tapping the floating bubble takes one capture of the screen. The capture is only in memory and is not written to storage or sent over the network.
- Models and packs: model files, text recognition packs and the list of models are in the app's storage. You can delete models on the models screen. Text recognition packs disappear when you clear the app's data or uninstall it.
- Settings: languages, the selected model, the Wi-Fi download setting and the position of the floating bubble stay until you clear the app's data or uninstall it.
- “Własne API”: profiles and API keys are encrypted with a key from Android Keystore and excluded from backups. You can delete them on the “Własne API” screen.
- The app's logs do not contain the content you translate.
4. What leaves the phone
| What | Where to | When |
|---|---|---|
| Request for the list of models. The server sees the IP address and technical data, for example the phone model and Android version | the Fumiko server on Cloudflare | automatically at launch |
| Downloading a model file. Hugging Face sees the IP address | Hugging Face and its file servers | when you tap “Pobierz” (“Download”) |
| Downloading text recognition packs. Hugging Face sees the IP address | Hugging Face and its file servers | automatically, by default only over Wi-Fi |
| Only when you turn on “Własne API”: the text to be translated, including text read on the phone from a manga page, and your API key. Never images or screenshots | the provider from your profile: Anthropic, Google, OpenAI, OpenRouter or another address you enter | when you translate through that profile, after your consent; Ekran mode requires separate consent |
Connections to the Fumiko server and to Hugging Face contain no identifiers and none of the content you translate. No other data leaves the phone.
“Własne API” connects the phone directly to the provider, without the Fumiko server. I do not receive this text or your key. The provider processes the text under its own terms of service and privacy policy.
Google Play shows me aggregate statistics (installs, countries, phone models, Android versions) and crash reports, which Google collects from people who agree in Android to send diagnostic data. I also see reviews: the display name, the rating and the text.
When you write to me, I see your email address, the content and any attachments. I use them only to reply.
5. Purposes and legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Providing the list of models | IP address, technical connection data | Article 6(1)(b) GDPR, performance of a contract (the Terms of Service) |
| Security and stability of the server and the app | connection data, logs, Google Play statistics | Article 6(1)(f) GDPR, legitimate interest |
| Contact, complaints, replies to reviews, defense against claims | email address, content, display name in the review | Article 6(1)(f) GDPR, and for a complaint also Article 6(1)(b) |
I do not base processing on consent and I do not make solely automated decisions (Article 22 GDPR).
6. Recipients and transfers outside the European Economic Area
- Cloudflare, Inc. (USA): processor, the server with the list of models and email forwarding. Transfers to the USA are based on the EU-US Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795) and, as a fallback, standard contractual clauses.
- Hugging Face, Inc. (USA): the service with the model files. The phone connects to it directly, and Hugging Face acts under its own rules: Hugging Face Privacy Policy.
- “Własne API” provider: only when you turn it on. A separate controller, under its own rules. If it operates outside the European Economic Area, the text goes there by your decision.
- Google: Google Play (store, statistics, reviews) and the Gmail mailbox (Google Ireland Limited), a separate controller, under Google's rules. Transfers to the USA are based on the EU-US Data Privacy Framework and standard contractual clauses in Google's terms.
I will send a copy of the safeguards on request (Article 13(1)(f) GDPR).
7. How long I keep data
- Data on the phone: until you delete it in the app, clear the app's data or uninstall the app.
- Logs of the server with the list of models (method, type of path, response code, random request number and handling time, without the IP address): up to 7 days.
- Correspondence: until the matter is resolved, and then at most 3 years.
- Data held by Google, Hugging Face and the “Własne API” provider: under those companies' rules.
8. Your rights
You have the right to access your data, to have it corrected or erased, to restrict its processing, to data portability and to object to processing based on my legitimate interest (Articles 15–18, 20 and 21 GDPR). You can file a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.
Write to support@approject.dev. Fumiko has no accounts or identifiers, so I cannot link server data to you (Article 11 GDPR). I will reply within a month.
You delete the data on the phone yourself, by clearing the app's data or uninstalling the app.
9. Information stored on the phone
The app saves model files, text recognition packs, the list of models, settings, the translation working file and “Własne API” profiles in the phone's storage. The app does not work without this, so it does not ask for consent (Article 399(3)(2) of the Polish Electronic Communications Law of July 12, 2024).
10. Changes to this policy
The date and version are at the top. I will announce a significant change in the app or in the update description in Google Play before it takes effect. This version applies to the Android app.